Alex
07654cd135
Secrets are now committed encrypted (sealed-secrets v0.38.4) instead of hand-applied out-of-band, closing the config-DR gap the backups intentionally don't cover. Existing Secret adopted via the managed annotation (values verified unchanged). Controller private key backed up GPG-encrypted off-cluster. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
28 lines
661 B
YAML
28 lines
661 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
namespace: notesnook
|
|
resources:
|
|
- namespace.yaml
|
|
- notesnook-config.yaml
|
|
- notesnook-sealedsecret.yaml
|
|
- db-service.yaml
|
|
- db-statefulset.yaml
|
|
- db-init-job.yaml
|
|
- minio-pvc.yaml
|
|
- minio-deployment.yaml
|
|
- minio-service.yaml
|
|
- minio-bucket-job.yaml
|
|
- identity-deployment.yaml
|
|
- identity-service.yaml
|
|
- identity-ingress.yaml
|
|
- sync-deployment.yaml
|
|
- sync-service.yaml
|
|
- sync-ingress.yaml
|
|
- sse-deployment.yaml
|
|
- sse-service.yaml
|
|
- sse-ingress.yaml
|
|
- monograph-deployment.yaml
|
|
- monograph-service.yaml
|
|
- monograph-ingress.yaml
|
|
- attachments-ingress.yaml
|